CVE-2026-80580
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/08/2026
Última modificación:
26/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fbdev: bound mode sysfs output to the sysfs buffer<br />
<br />
mode_string() uses snprintf() which can return a value larger than the<br />
remaining buffer space. show_modes() accumulates the return value into i<br />
without checking whether i has reached PAGE_SIZE, causing the offset to<br />
advance past the sysfs buffer if the modelist is long enough.<br />
<br />
Add a size parameter to mode_string() and use scnprintf() to return<br />
only the bytes actually written. Add an early return when offset<br />
already exceeds the buffer. In show_modes(), stop accumulating once<br />
the buffer is full.



